Enterprise search

This hub aggregates every CVE we track for Enterprise search, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Enterprise search.

• CVE-2023-49923Enterprise Search Insertion of Sensitive Information into Log File6.8Dec 12, 2023
• CVE-2021-37940An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malici...6.8Dec 7, 2021
• CVE-2021-22148Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user ...8.8Sep 15, 2021
• CVE-2021-22149Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated a...8.8Sep 15, 2021
• CVE-2020-7018Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will be able to view the administrator...8.8Aug 18, 2020